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THE CLAIMS 

1 . (original) A security indication spanning tree method comprising: 
determining asset value of a network node; 

ascertaining exposure rating of said network node; 

establishing a functional priority risk indicator for indicating the likelihood of an attack 
from another network node; and 

creating a spanning tree schematic of a network including said network node, wherein 
said spanning tree schematic includes an indication of said asset value. 

2. (original) A security indication spanning tree method of Claim 1 wherein said spanning 
tree schematic includes an indication of said exposure rating. 

3. (original) A security indication spanning tree method of Claim 1 wherein said spanning 
tree schematic includes an indication of said attack risk. 

4. (original) A security indication spanning tree method of Claim 1 wherein said asset value 
provides an indication of an economic value of functions provided by said network node. 

5. (original) A security indication spanning tree method of Claim 1 said asset value 
corresponds to an economic impact of a disruption to functionality provided by said network 
node. 
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6. (original) A security indication spanning tree method of Claim 1 wherein said exposure 
rating defines a threshold value corresponding to connectivity of the network node with other 
network nodes. 

7. (original) A security indication spanning tree method of Claim 1 wherein said network 
node is given an exposure rating value based upon a connectivity distance from a root node. 

8. (original) A security indication spanning tree method of Claim 1 wherein said root node 
is a node closest to an extemal network. 

9. (original) A security indication spanning tree method of Claim 1 wherein said functional 
priority risk indicator is associated with an economic benefit and utility of functionality said 
network node provides. 

10. (original) A security indication spanning tree system comprising: 
a bus for communicating information; 

a processor coupled to said bus, said processor for processing said information including 
instructions for building an attack impact susceptibility spanning tree representation including 
asset value factors; and 

a memory coupled to said bus, said memory for storing said information, including 
instructions for building said attack impact susceptibility spanning tree representation including 
said asset value factors. 
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1 1 . (original) A security indication spanning tree system of claim 10 wherein said asset risk 
value is automatically determined.. 



1 2. (original) A security indication spanning tree system of claim 1 0 further comprising a 
central console for interfacing with a network application management platform. 

1 3. (original) A security indication spanning tree system of claim 10 wherein said 
instructions include attack spread risk determination instructions. 

14. (original) A security indication spanning tree system of claim 10 wherein said 
instructions include exposure rating determination directions. 

1 5. (original) A computer usable storage medium having computer readable program code 
embodied therein for causing a computer system to implement security indication spanning tree 
instructions comprising: 

a device examination module for examining information regarding devices included in a 
centralized resource network , wherein said examining includes ascertaining what applications 
said devices support; 

an importance indication module for obtaining an indication of a relative importance of 
functionality provided by said device; and 

a spanning tree module for building a spanning tree topology representation including 
said indication of said relative importance of said device in supporting said applications. 
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1 6. (original) A computer usable storage medium of Claim 1 5 herein said relative 
importance of said device is based upon an economic value of functions said devices performs in 
support of said applications. 

1 7. (original) A computer usable storage medium of Claim 1 5 further comprising an internal 
attack permeability module for investigating the permeability of a network in permitting an 
internal attack on a device from other devices included in the network. 

1 8. (original) A computer usable storage medium of Claim 1 7 wherein said investigating 
includes: 

analyzing the ease of attack on said device from other devices in said centralized resource 
network; and 

assigning an connectivity threshold value to said device based upon said analysis of said 
ease of attack. 

1 9. (original) A computer usable storage medium of Claim 1 5 further comprising an attack 
danger assessment module for assessing the danger of an attack from other devices included in 
said network. 

20. (original) A computer usable storage medium of Claim 1 9 further comprising: 
deriving an attack danger indication based upon said indication of said relative 

importance of said device and said connectivity threshold value; and associating said attack 
danger indication with said device. 
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